Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: JD0PoD4FWJpY19fR943Lg4O5k5zMEYXW1CFP5Ceq0/0=
Subject key identifier: 8A:D0:F5:D5:9F:6D:70:41:75:64:C3:2B:B0:57:2F:C2:2D:C0:93:48
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019E1EA37738607D9C6E0F67CE21B5144A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 05AE
Signing time: Wed 13 May 2026 00:01:29 +0000
Manifest this update: Wed 13 May 2026 00:01:29 +0000
Manifest next update: Thu 14 May 2026 00:01:29 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: Lxg7IoGWBrl0CaBPfRWjr2WlhP5EuwUv33zf45wE3Vg=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:77:38:60:7d:9c:6e:0f:67:ce:21:b5:14:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: May 13 00:01:29 2026 GMT
Not After : May 14 00:01:29 2026 GMT
Subject: CN=8ad0f5d59f6d70417564c32bb0572fc22dc09348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:ee:50:2b:be:52:0d:24:84:82:29:5e:df:
0e:6a:1f:6e:3f:b3:03:fc:64:7a:fe:96:f0:fe:c0:
00:ce:d4:89:a3:a2:9e:b2:3d:c3:82:42:8d:bc:a0:
19:07:4b:a5:6f:f1:6f:c7:86:16:08:90:c1:7c:8c:
ad:d4:17:8b:8f:32:29:9d:3d:f9:2f:00:29:61:50:
c2:0a:02:8a:6f:9f:20:05:a9:d5:e2:83:34:80:b6:
28:45:6a:e8:ce:27:3f:68:f5:07:97:80:f1:00:d9:
0a:7d:7f:de:6a:6d:cc:94:87:ed:27:e3:5e:65:2d:
be:85:f8:6d:57:3c:bc:09:c9:5e:69:2e:0e:5e:f0:
f9:8f:e4:1b:fb:78:e9:8b:26:dc:0b:a5:8b:25:1f:
0d:a7:eb:8a:d1:e6:3c:b2:b5:c9:88:f3:13:33:92:
ba:d8:b7:cc:d5:48:79:8e:d8:0d:8f:03:3d:71:21:
fd:42:b8:3b:ae:26:d9:36:97:fc:4a:a8:cd:39:dc:
37:71:6a:9d:e4:2a:9a:74:cc:40:d1:64:75:62:20:
1c:f8:bd:5a:34:80:00:91:40:46:4d:f2:a6:10:dc:
10:69:32:a2:02:d0:ef:4e:c7:41:0a:15:80:fb:12:
ef:0e:2e:2c:be:ce:d3:39:14:55:eb:a5:28:08:e1:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:F5:D5:9F:6D:70:41:75:64:C3:2B:B0:57:2F:C2:2D:C0:93:48
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:8f:36:ef:16:59:37:57:48:46:a9:7f:16:2b:eb:6b:e2:
bb:12:67:71:45:b8:87:60:89:a1:fc:97:b3:56:78:99:e0:a9:
b4:fe:c2:81:8e:63:6b:db:ef:bf:94:9e:90:18:2a:2f:3d:b0:
1b:38:57:ed:d9:04:2c:5b:0e:29:2a:37:0b:ae:6d:d4:6e:59:
42:4c:ac:3e:69:b4:a2:5e:8d:52:34:18:b4:84:af:8a:01:5c:
86:20:c4:b2:a7:d7:d2:04:f0:e1:11:bc:eb:13:67:b0:68:c6:
f2:e3:1c:6d:7b:ea:c9:5e:b9:94:6c:41:f9:28:a4:45:22:ef:
50:08:d3:a8:11:f2:ea:82:43:0d:1a:7b:3d:51:14:47:be:62:
a6:fe:98:cb:de:1b:be:fb:b0:36:1c:df:c8:2a:dc:49:58:f3:
36:35:61:f1:b4:31:c8:d8:9f:5a:f4:b5:91:85:ea:11:5b:06:
86:61:b8:8d:ef:a8:5c:82:3f:d4:8d:25:80:26:f5:35:5c:38:
7d:e0:df:d3:04:ad:4a:cb:da:ad:33:60:83:23:28:f3:f5:92:
7c:86:64:58:20:bd:0f:c3:f4:7a:db:eb:bc:b7:49:04:5f:5f:
a8:c2:76:84:8b:9c:22:77:b4:ac:2f:56:1d:75:60:d0:3f:db:
b0:5f:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:43 2026 by rpki-client